You have to regenerate your rsa keys after changing your host name or domain....
You also have to remove the saved key out of your ssh client for that device.... -----Original Message----- From: Andrew Larkins [mailto:[EMAIL PROTECTED]] Sent: Friday, May 03, 2002 7:38 AM To: [EMAIL PROTECTED] Subject: PIX SSH problem [7:43215] Hi all, maybe some PIX guru can shed some light here. While I was uploading the pix621.bin software to a lab PIX, after a reload, I found out that the new software does not like an underscore(_) in the hostname. I changed the hostname LAB_PIX to LAB-PIX. This then complained about the rsa key pair used for SSH access. No problem here. I removed the key pair and regenerated it, saved, all ok. I used "no ca save all" and "ca zeroize rsa". Key pair was successfully regenerated and saved. Problem now is that I can not SSH from here in any more. I get a message that says: "Decrypting packet: received/computed checksum error" from my secureCRT client. I can still get into the PIX via the internal router and then telnet to the internal cards IP address. So this is SSH only that is a problem. Any ideas here.... Thanks in advance ***************************************************************** DISCLAIMER: The information contained in this e-mail may be confidential and is intended solely for the use of the named addressee. Access, copying or re-use of the e-mail or any information contained therein by any other person is not authorized. If you are not the intended recipient please notify us immediately by returning the e-mail to the originator. Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=43229&t=43215 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]